page-conversion
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and reference materials contain no malicious code, obfuscated content, or unauthorized commands. The operating contract explicitly prohibits the use of dark patterns and focuses on ethical persuasion and accessibility.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content including marketing pages, lead forms, and analytics data, which creates a potential surface for indirect prompt injection from untrusted sources.
- Ingestion points: External marketing pages, forms, traffic analytics, and user feedback data (recordings, heatmaps, polls) as specified in page-and-form-workflow.md.
- Boundary markers: None explicitly defined in the workflow for the ingested data.
- Capability inventory: Limited to generating copy recommendations, component specifications, and experiment plans for user review; no automated file-system modifications or network operations are performed.
- Sanitization: No explicit sanitization or filtering of external content is specified.
Audit Metadata